CVE-2026-89875

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the media TI VPE component where the vip stop streaming() function fails to synchronize the hardirq handler or disable recovery work. This can lead to a use-after-free scenario where an overflow IRQ or a list-complete IRQ in flight dereferences the stream after its resources have been released. Specifically, the descriptor list is freed by vip release stream() during file release, and the stream is freed by free stream() during unbind or remove operations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.